Bell inequalities and distillability in iV-quantum-bit systems 
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The relation between Bell inequalities with two two-outcome measurements per site and distilla- 
bility is analyzed in systems of an arbitrary number of quantum bits. We observe that the violation 
of any of these inequalities by a quantum state implies that pure-state entanglement can be distilled 
from it. The corresponding distillation protocol may require that some of the parties join into several 
groups. We show that there exists a link between the amount of the Bell inequality violation and 
the size of the groups they have to form for distillation. Thus, a strong violation is always sufficient 
for full iV-partite distillability. This result also allows for a security proof of multi-partite quantum 
key distribution (QKD) protocols. 



I. INTRODUCTION 

The statistical correlations between the outcomes of 
experiments performed by different observers in a com- 
posed quantum system can in general not be reproduced 
by local variable models (LV) (in the sense of Einstein- 
Podolsky- Rosen Q ) . This impossibility is shown by prov- 
ing that quantum correlations violate some constrains, 
known as Bell inequalities that any LV theory sat- 
isfies. Thus, a quantum state p in a composite sys- 
tems of TV parties, C dl <g> C d2 <g> . . . <g> C djv , where di is 
the dimension of the Hilbert space associated to party i 
(i = 1, . . . , A), doesn't admit a LV description when it 
violates a Bell inequality. It is not difficult to see that 
separable states, 
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i.e. those states that can be written as a mixture of 
product pure states, do not violate any Bell inequality 
H . States that are not separable are called entangled. 
Entanglement is then a necessary condition for the vio- 
lation of a Bell inequality. 

The understanding and interpretation of quantum cor- 
relations has notably changed in the last years. Entan- 
glement has turned out to be a practical resource, since 
it is the key ingredient for most of the recent quantum 
information applications, such as teleportation [Q and 
quantum key distribution ||. In all these new informa- 
tion processing protocols, some results that cannot be 
achieved in Classical Information Theory become possi- 
ble by using entangled states. These processes do not 
have classical analog because they are based on entan- 
glement, which is an intrinsic quantum feature. Never- 
theless, it is not clear whether all entangled states are 
useful for quantum information tasks. 



In systems of two parties, C 
sentative entangled state is 
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C 2 , the most repre- 
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where d = min(di, cfe) and {\i)} are orthonormal bases in 
the two local systems. The state (g) is the maximally en- 
tangled state of two d-dimensional systems, often called 
qudits. A state p is definitely useful for quantum informa- 
tion applications when out of possibly many copies of it, 
the parties are able to distill some amount of maximally 
entangled states using only local operations and classical 
communication (LOCC). If this is the case, the state p 
is said to be distillable ||. This condition is equivalent 
to see if some pure-state entanglement can be extracted 
from the original state, since all entangled pure states are 
distillable 0. It is known that there are mixed states, 
called bound entangled, that are not distillable in spite of 
being entangled B. It is an open question whether this 
type of states are useful for quantum information. For 
systems of more parties the picture is more complicated, 
and it is not even known what the fundamental types of 
pure-state entanglement are |J. However, as we will see, 
one can extend the notion of distillability to the multi- 
partite scenario: a quantum state shared by A parties is 
A-party distillable when out of many copies of it all the 
parties can extract by LOCC pure-state A-party entan- 
glement, i.e. a pure state that is bipartite entangled with 
respect to any splitting of the parties into two groups. 

Distillability and the violation of Bell inequalities are 
two manifestations of entanglement. The first is related 
to the usefulness of a state for quantum information pro- 
cessing. On the other hand, Bell inequality violation 
demonstrates the inadequacy of classical LV models. Is 
it possible to relate these two concepts? This is the main 
motivation for the present work: to search for a con- 
nection between Bell inequality violation and distillabil- 
ity. We consider systems of A quantum bits, or qubits, 
and the complete set of Bell correlation inequalities with 
two two-outcome measurement per site (see below). We 
demonstrate that there exists a link between their viola- 
tion and state-distillability. 

The structure of the article is the following. In the 
next section we describe more precisely our A-qubit sce- 
nario. We introduce the family of Bell inequalities we 
consider and we extend the concept of distillability to 
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these systems. In Section III we establish a first result: 



if a A-qubit state violates a Bell inequality of this fam- 
ily, it is at least bipartite distillable. This result is used 
as a basis for the main result of the paper, described 
in Section IV: the amount of violation is connected to 
the degree of distillability of the state. In particular, if 
the violation of an A-qubit inequality exceeds the bound 
2( JV_2 )/ 2 ) the state is fully distillable. These results are 
valid for the whole family of inequalities that we study. 
We move then to consider a subset of these inequalities 
that detects truly A-qubit entanglement, and we prove 
that their violation is also sufficient for TV-party distilla- 
bility (section |v|). Finally, in Section VI we discuss the 
connection of these results with the security of multi- 
partite key distribution protocols, and in Section VII we 



summarize our work, relating it to some existing results 
for A-qubit systems. Three appendices contain the most 
technical steps of the demonstrations, that we have cho- 
sen not to include in the main text in order to enhance 
its readability and to underscore the physical strength of 
the results. 



II. iV-QUBIT SYSTEMS 

In this article we deal with states shared by an arbi- 
trary number of observers, A, such that the dimension of 
each local Hilbert space is two (qubits). Let us describe 
here more precisely the type of Bell inequalities and dis- 
tillability protocols that we consider in these systems. 



A. Bell inequalities 

A complete set of Bell correlation inequalities for A- 
qubit systems was found by Werner and Wolf, and in- 
dependently Zukowski and Brukner, in 0,0. Every 
local observer, i — 1,...,N, can measure two observ- 
ables, Oj = Oi and Of = O-, of two outcomes labelled 
by ±1. Thus, after many rounds of measurements, all the 
parties collect a list of experimental numbers, and they 
can construct the corresponding list of correlated expec- 
tation values, E(ji , j 2 , • • • , Jn) = {Of ® Of (g) . . . ® Off ) , 
where ji — 1,2. The general expression for the Werner- 
Wolf-Zukowski-Brukner (WWZB) inequalities is given by 
a linear combination of the correlation expectation val- 
ues, 



In(c)= ^2 c tii,---JN)E(j 1 ,...,j N )<l, (3) 
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where the conditions for the coefficients c can be found 
in This set is complete in the following sense. If 

none of these inequalities is violated, there exists a LV 
model for the list of data E(ji, . . . , j'at). If any of these 
inequalities is violated, the observed correlations do not 



admit a LV description. Thus, this family of inequali- 
ties can be thought of as the generalization of the CHSH 
inequality @^|, 

I 2 = ~(£(1, 1) - E(l, 2) + E(2, 1) + E(2, 2)) < 1 (4) 

to an arbitrary number of subsystems. Indeed it reduces 
to the CHSH inequality when A = 2. 

Now consider a system composed of A-qubits and 
quantum observables corresponding to von Neumann 
measurements |14 o~(n) = h ■ a, where h is a normal- 
ized three-dimensional real vector and a — {cr x ,a y ,a z ). 
Thus, any observable is defined by a real unit vector n. 
It is known that for any Bell inequality with the corre- 
sponding local measuring apparatus, one can define the 
so-called Bell operator [ ^5[ . In our case, for any of the in- 
equalities (||) and any set of local measurements 
with i — 1, . . . , A, we can construct the Bell operator 
B = B(c, {hi, n-}) such that In{c) = tr(pB). Then, p 
violates the corresponding Bell inequality if 



tr(pB) > 1. 



(5) 



The spectral decomposition of all these Bell operators 
is known ifjUf , and implies that the maximal violation is 
always obtained for Greenberger-Horne-Zeilinger (GHZ) 
states of A qubits |GHZjv) = (|0...0> + \1 . . .l))/y/2. 
Indeed, one can find (i) a local computational basis 
{ 1 0) ^- , for each qubit j, (ii) 2 7V ~ 1 non-negative num- 
bers bk and (iii) 2 Ar_1 parameters 9k such that 
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where Q£ are the projectors on the generalized GHZ- 
states 1 61) defined as 
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= — (e^|fc)±|fc)) 
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In these expressions we label the product states in the 
computational basis by with k E {0,1,..., 2 — 1}, 
where the correspondence is given by the binary expan- 
sion, i.e. |0) = |0...0), |1) = |0...01_), and so on until 
\2 N - 1) = |l...l). We also define \k) = \2 N - 1 - fc); 
written as tensor product, |fe) is obtained from \k) by ex- 
changing all the zeros and ones. The set of the with 
k e {0, 1, 2 N ~ 1 — 1} and a — ± is a basis of eigenstates 
of Bj\i 7 that we shall call the theta basis. The values of 
the coefficients bk and 8k depend on the specific Bell's 
inequality and the chosen measurements Jig] , 

An important member of this family of inequalities is 
the Mermin-Belinskii-Klyshko (MBK) inequality 
Given a set of measurements the iV-qubit Bell 

operator for these inequalities is defined recursively as 
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M N =2 [M«iv) + <r(n' N )) ® Mjv_i 
+ {<r(h N ) - <r(h' N )) ® M' N _A , 



(8) 
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where M' n is obtained from M n interchanging hi and n^, 
and Mi = a(hi). The maximal quantum violation of 
the set of inequalities @ is obtained for the MBK one 
fiol , with some particular choice of measurements, and it 
is equal to 2^ JV ~ 1 ^ 2 , i.e. quantum violations of WWZB 
inequalities are in the range (1,2^ ~^' 2 ]. 



B. Distillability 

The concept of state distillability is very often related 
to the usefulness of a state for quantum information 
tasks. In the bipartite case, a state p is distillable when 
out of possibly many copies of it the two parties can ex- 
tract a two-qubit maximally entangled state, or singlet, 
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(100} + |11», 
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by LOCC. It is not completely evident how to extend this 
definition to a multi-partite scenario. In this work we will 
use the following generalization: a quantum state shared 
by N parties is A-partite distillable when it is possible 
to distill states like (^) between any pairs of parties using 
LOCC. This is equivalent to demand that any truly N- 
partite entangled state, in particular an A-qubit GHZ 
state, can be obtained by LOCC. Indeed, once all the 
parties are connected by singlets, one of them can pre- 
pare locally any of these states and send it to the rest by 
teleportation. On the other hand if the parties share an 
TV-partite pure entangled state, there exists local projec- 
tions such that N — 2 qubits project the remaining two 
parties into a bipartite entangled pure state Jl9[ , which 
is always distillable to a state like @. 

In the multipartite case the situation is subtler than 
in the bipartite one. Consider a state p which is not N- 
partite distillable. It may happen that if some of the par- 
ties join into several groups (or establish quantum chan- 
nels between them), the state becomes distillable (see 
f20||). The original state is now shared by L < A parties, 
and it is L-partite distillable. However it is important to 
stress that some of the parties can extract singlets with- 
out using any global quantum operation between them. 
They already had some distillable entanglement that was 
hidden and that can be extracted by joining some of the 
parties. We have two extreme cases: (i) the parties can 
perform all the operations locally, and then the state is 
A-partite distillable as was defined above, or (ii) they 
have to join into two groups, and then the state is said 
to be bipartite distillable All the other cases are 

between these two possibilities and, of course, there also 
non-distillable states. According to this classification, 
we will estimate the degree of distillability in an A-qubit 
state by means of the minimal size of the groups the 
parties have to create in order to distill pure-state entan- 
glement between them. 



III. VIOLATION OF BELL INEQUALITIES 
IMPLIES BIPARTITE DISTILLABILITY 

One of the present authors has proven some time ago 
pjl[ that for a specific Bell operator B^, namely the MBK 
operator with some given settings, all the states that vi- 
olate the corresponding Bell inequality are bipartite dis- 
tillable, although the partition may not be such that one 
of the parties is a single qubit J22j . Refs. [ plp2] | are the 
only two studies of the link between violation of Bell and 
distillability in A-qubit systems before this one j23). As 
a first step, we provide the generalization of the result of 
Ref. for an arbitrary inequality of the WWZB family. 

Theorem 1 Consider an A-qubit state p. If there ex- 
ists a Bell operator in the WWZB family such that 
the corresponding inequality is violated, that is such that 
Tt(pBn) > 1, then p is bipartite distillable. 

Proof: The proof goes along two steps. 

First step. If p is such that Tr(pBiy) > 1 for a Bell op- 
erator with two measurement per qubit, then it has been 
proven in Ref. |l(J that there exists at least one partition 
of the N qubits into two disjoint groups, A and A c , such 
that the partial transpose [Q of p, p TA , has a negative 
eigenvalue (the state is said to be NPT). This condition 
is necessary for distillability [||, but it is conjectured not 

to be sufficient ^{|, except for C 2 ® C d systems. Now, 
from the state p, we form the state 



PD 



= E E X ^k, with \l ee Tr(pQl) (10) 



fc=0 



by keeping only the terms that are diagonal in the theta 
basis associated to Bm- Note that we do not claim that 
there is an LOCC operation such that p t— > pp. By con- 
struction, Tt(pBn) = Tt(pdBn): pu violates the same 
inequality as p. As a consequence of the result in Ref. 
fiof , we know that there exists at least one bipartite split- 
ting A — A c of the qubits such that p^ 4 has a negative 
eigenvalue. As stressed several times, this is not in gen- 
eral a guarantee that pu is distillable. However, it turns 
out that here NPT is a sufficient condition for distillabil- 
ity. 

To see this, we write the matrix pjj in the product 
basis. This gives 



PD 



t [ 

k=0 

At-Ar 



(\k)(k\ + \k)(k\) 



k {e i6k \k){k\+h., 
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This means that there are non-zero elements only in the 
two main diagonals of the matrix. It is easy to get con- 
vinced that the partial transposition with respect to any 
partition A — A c will preserve this structure (fig. Q). As 
an example, take N — 5 qubits, A = {2, 3}. Then 



00111)(11000| ^> |01011) (10100 1 



(12) 
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an element of the anti-diagonal is sent onto another ele- 
ment of the anti-diagonal. Of course, the elements of the 
main diagonal remain unchanged. 

This being the structure of , the negativity of some 
eigenvalue can be studied by looking at each 2x2 bloc 



M(k) 



((ft 



(Pi*)* 



\ (p T D A h k (Pi' 



(13) 



for k — 0, 2 W ~ 1 — 1. Since po is NPT for some bipar- 
tite splitting, there exist at least two values of k, say K 
and K', and a bipartite splitting A — A c such that: (i) 
\K')(K'\ is sent onto |-ff)(-K~| by the partial transposition 
Ta, and (ii) the determinant of the 2x2 block M(K) is 
negative: 



(A++A A .) 2 -(A+,-A A „) 2 <0. 



(14) 



Now it is not difficult to see that the iV-qubit state 
Pd is bipartite distillable. According to the partition 
A — A c , the state can be locally projected into the sub- 
space H(K, K ') spanned by \K), \K), \K') and \K') @. 

2 2 

This subspace is isomorphic to C <£> € , and one can re- 
label \K) = |00), \K) = jll), \K') = |01) and \K') = |10). 
The projected two-qubit state satisfies NPT, then it is 
distillable ||27tl. 





FIG. 1. Schematic representation of the effect of the par- 
tial transposition on the matrix po, written in the product 
basis. 



This is the end of the first step of the proof. The only 
problem left is that the transformation p — ► pjj may 
well be impossible with LOCC [^6|. We have not a final 
proof for this impossibility. Note however that the theta 
basis in which we should diagonalize p is defined by 2 JV ~ 1 
highly non-local parameters, the phases Ok, whose value 
is determined by the details of the observable [[l6| . 
We cannot get easily rid of the Ok by using the freedom 
left in the construction, that is by a redefinition of lo- 
cal phases |0>^ -> e^lO^- and \l) j -> e l ^\l) p because 
there are only 27V such phases. As we said in the main 
text, instead of looking for an hypothetical LOCC proto- 
col leading from p to pu defined in ([io|), we take another 
approach. 

Second step. In the previous step, we have identified 
the subspace in which to project the state, locally for the 
partition A— A c . It is the subspace Tt(K, K') spanned by 
\K), \K), \K') and \K>), or alternatively, by \9 K ), \9 K ), 



\9 K ,) and \6 K ,). We begin by applying a local phase re- 
definition U that erases the phases 9 k and 6k>' thus 
jf,) = \ipK K') where the ip's are the GHZ states 
without phases 



1 



v/2 



(|*>±|*» 



(15) 



This U of course does not erase all the other phases Ok, 
but this is not a problem. 

Diir and Cirac |H| have shown that any TV-qubit state 
p can be brought by LOCC to a state diagonal in a GHZ- 
basis like (Il5|), 



Pd = 



k=0 



CT = ± 



H%P£, with^ = Tr(pP^) (16) 



where is the projector on the GHZ state \ipf). All the 
diagonal terms, (ipk^lpl^k)' are kept unchanged, while 
the rest of terms go to zero. Thus in our case we can 
bring U pU^ onto 



Pd 



cr = ± 



{\ K ,P K ,+\ K P K ) 



^ 5>£P fe CT , (17) 

k^K.K' ct=± 



just using local operation on each sub-system. Note that 
for K and K' the XZ are indeed the same that appear 
in the construction ( |l(]| ) of pp. Obviously, when written 
in the product basis, p' D has exactly the same structure 
as po, that is, non-zero elements only in the two main 
diagonals. Contrary to what happened for po, we do not 
know if p' D violates the original Bell's inequality. How- 
ever this is not important here, we simply have to apply 
the same procedure that we followed for pr>: take the par- 
tition A - A c that brings \K'){K'\ onto \K){K\; then by 
construction the determinant of M'(K) built from p' T D A 
is the same as the determinant of M(K) built from p T D A . 
Thus A — A c can locally project p' D into H(K, K'), and 
the resulting two-qubit state will satisfy NPT and will 
thus be distillable. This concludes the proof. □ 

In summary, the way of distilling a singlet from a state 
p that violates a Bell inequality is: (a) determine on the 
paper the 2x2 subspace H(K, K') in which to project and 
the corresponding partition; (b) erase locally the phases 
9k and Ok' and apply the Diir-Cirac protocol, and fi- 
nally (c) project onto TC(K,K'). In the proof, we used 
three known results: the spectral decomposition for Bell 
operators with two measurements per qubit Jl6[ , the fact 
that any p that violates one of these Bell inequalities is 
NPT for at least one partition [0, and the depolariza- 
tion protocol of 1 20 1 _ The new insight is provided by the 
peculiar structure of the matrices pu and p' D that makes 
NPT a sufficient condition for distillability. 



IV. THE AMOUNT OF VIOLATION AND THE 
DEGREE OF DISTILLABILITY 
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A. Main result 

In this section we prove the main result of the article: 
there exists a link between the amount of Bell violation 
and the degree of state distillability. We have just shown 
that if a state violates any of the WWZB inequalities (^), 
then it is bipartite distillable. As it has been mentioned 
above, the range of quantum violations, (1, 2^ N ~ 1 '' 2 ], is 
quite broad, specially for a large number of qubits. This 
suggests that a finer classification of state distillability 
properties can be done depending on the amount of Bell 
violation. This is the scope of this section. Let us start 
by proving the following 

Lemma 1: Consider an A-qubit state pn that violates 
an inequality of (^), with Bell operator Bn , by an amount 
(3n, i.e. 



tv(p N B N ) = j3 N > 1. 



(18) 



Then, it is possible to obtain by LOCC a new state pm-i 
of N — 1 qubits violating another inequality of (|J) , with 
Bell operator Bn-i, by an amount /8jy_ l > Pn/V^- 

Proof: It was shown in JT^j that the CHSH is the ele- 
mentary inequality for the whole set ([|) . This means that 
for N qubits any of these inequalities can be written as 



Bn = 2 [( cr ( ftjv ) + v&'n)) ® B+_ 1 
+ (er(njv) - a(n' N )) <g> B N _ 1 ] , 



(19) 



where B N _ 1 are WWZB Bell operators of N— 1 qubits — 
of course, the special relation that B~^ is obtained from 
B^ by interchanging n, and f)! i holds only for the MBK 
inequality. Using local unitary operations, the Ath qubit 
can put ft 7v and h' N in the xy plane, their bisectrix be- 
ing the x axis. Denote by 25 the angle between the two 
vectors, < 5 < ir/2. Then, we have that the state pn 
satisfies 

tt(p N B N ) = cos5tr(p N a x ® B^^) 

+ smSti(p N a y ® B~ N _ 1 ) = [3 N . (20) 

Suppose now that tr{pN & x ® B^j v _ 1 ) > ti(pN cr y (^B^_ 1 ) 
(of course a similar demonstration is possible for the 
other case). Then it follows from (|20|) that 



tt(p N a x <g) B+_ 1 ) 



> 



P. 



N 



cos 5 + sin 5 ^/2 



> ^- (21) 



If we use the spectral decomposition a x = |+)(+| — 
|— )(— |, and we denote by B~p f _ 1 = —B^~ [ _ 1 , which is 
a new Bell operator of TV — 1 qubits, we have 

tr((+\p N \+)B+_ 1 ) + tr((-\p N \-)B+_ 1 ) > ^L. (22) 

Define the normalized states p± = (±\ppf\±)/p± of N—l 
qubits, where p± = tr((±|pjy|±)). The physical mean- 
ing of these states is the following: if the N qubits start 



with state pjv and party N measures o~ x , the rest of the 
qubits are projected into p± with probability p±. Again 
without loss of generality, consider the case in which 
tr(p + B+_ 1 ) > tr(p_S+_ 1 ). Then from (§§) it is easy 
to see that 



P. 



N 



tr(p+S+_ 1 ) = [3 N -i > 



(23) 



Thus, starting from p^ that has a Bell violation equal to 
/3jv, any qubit can locally project with some probability 
the other N — l qubits into a new state pn-i that vio- 
lates a new inequality by an amount of at least (3n/v2. 
□ 

We note that ft^-i > (3n/V^ can always be ob- 
tained with non-zero probability. In the case where p + 
(or pJ) is zero, p^ is a product state containing a a x 
eigenstate on the relevant tensor factor. However, since 

= (-KH = 0. E q- © tells us th at in this 
situation (3n = Pn-i right from the beginning, such that 
no measurement is required at all. 

Of course, it is likely that some of the inequalities used 
in the derivation of this lemma are not tight. However 
they cannot be improved if we do not have more infor- 
mation about the specific state or Bell operator. We can 
now combine this lemma with the result shown in Section 
III for proving the following 

Theorem 2: Consider an qubit state pn violating 
one of the WWZB inequalities by an amount (3 such that 



1 < 2— < < 2" 



(24) 



Then pure-state entanglement can be distilled if the par- 
ties can join into groups of at most p — 1 qubits. 

Proof: Using the lemma seen above, any qubit can 
perform a local projection such that the amount of Bell 
violation is decreased by a factor \[2, In the worst case, 
after N — p of these local projections, the rest of p qubits 
share a state p p having a Bell violation of 1 < (3 P < \ 2. 
A new local projection is not possible since it might im- 
ply that the resulting state is not entangled. At this 
point, and since p v is still non-local, we can use the re- 
sult of Section lHJ: the state p p is bipartite distillable. 
Thus, these p qubits can distill pure-state entanglement 
between them if they can join into groups of at most p—1 
parties. □ 

This theorem gives the searched link between Bell vi- 
olation and the degree of state distillability. As in any 
distillation scenario we have at our disposal many copies 
of the state pn- Thus, the parties can use the different 
copies for connecting all of them. The amount of Bell vi- 
olation bounds the size of the groups they have to form in 
any of these distillation processes. It gives an estimation 
of the L-partite distillability of the state (2 < L < N), 
or in other words, the number of quantum channels to be 
established between the parties for distillation (see figure 
0). If we focus now on A-partite distillability, we have 
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Corollary 1: If an AT-qubit state violates any of the 
WWZB inequalities by an amount f3 N > 2 (JV ~ 2)/2 , then 
it is TV-partite distillable. 

Proof: It follows easily from the previous theorem. All 
the parties but 1 and I, with / = 2, . .. , n, perform the 
local projection. Then the two qubits I and 1 end, with 
some probability, with a state pu violating the CHSH 
inequality. This two-qubit state is entangled and then 
it is distillable |27j|. In this way, the first party shares 
singlets with all the others, so the initial state is iV-party 
distillable. □ 




FIG. 2. The figure shows the case of a seven-qubit state 
having a Bell violation of 4\^2. After local projections by 
four parties, the other three are left with a state violating 
a WWZB inequality. Then, if two of them share a quan- 
tum channel, they can distill pure-state entanglement. For 
the blue partition, for instance, parties 2, 3, 4 and 6 per- 
form the local projection in such a way that 1, 5 and 7 end 
with a three-qubit state violating a WWZB inequality. Now, 
they can distill entanglement if (at most) two of them share 
a quantum channel, say parties 1 and 7. The parties run this 
protocol for all the different groups as in the figure, and at 
the end party 7 can prepare any A-qubit pure state locally 
and use teleportation for sending the corresponding qubit to 
the rest of parties. Thus, any A-qubit state can be prepared 
between all the parties using several copies of the initial state, 
provided that quantum channels are established between some 
of them. 



MBK case. Since distillability is sufficient for NPT, our 
results are a generalization of the ones in 28 to the 
whole set of WWZB inequalities. Indeed, defining as 
Pmax the maximal Bell violation for an A-qubit state 
p, if 0max > 2( JV ~ p )/ 2 , every subset containing p parties 
has at least one NPT partition. In a similar way as in 
p8[ , one can consider a partition of the A qubits into p 
nonempty and disjoint subsets a,\, . . . , a p and the collec- 
tion V of all unions of these sets with the empty set. The 
set V has 2 P elements. Then, if Va € V we have p Ta > 0, 
then/W < 2( w -p)/ 2 . In particular, if (3 max > 2< Ar - 2 )/ 2 , 
all the partitions are NPT (as it should be, since the state 
is fully distillable). 

As it has been already mentioned, it may happen that 
for a particular situation the bounds presented here are 
not good. However, they cannot be improved: a better 
estimation of the distillability properties of an iV-qubit 
state is not possible if we only know the amount of Bell 
violation. The clearest example is a -/V-qubit state of the 
form |GHZat_i)|0). This state violates the MBK inequal- 
ity for A qubits by a quite large amount, 2( N ~ 2 ^ 2 , even 
if it is clearly not A^-partite distillable — even worse, one 
of the qubits is not entangled at all. Similar examples for 
GHZ states oi N — p+1 qubits in A^-qubit systems show 
that the bounds given in Theorem 1 are indeed tight. 
In the next Section, we show that additional knowledge 
about the meaning of a given inequality leads to an im- 
provement of these bounds. 



C. Amount of violation and weight of the GHZ state 

Some further insight on the meaning of the main result 
above can be gained by noting that a state must have a 
large overlap with the GHZ state in order to violate an 
inequality of the WWZB family by a large amount. This 
is not astonishing, and can be quantified. 

Given the A^-qubit state pn, one can always redefine 
local bases (or apply local unitary operations) in order 
to maximize 



= (GRZ N \p N |GHZ 



N 



(25) 



It can be proven (see Appendix A) that for all Bell oper- 
ator B in the WWZB family, normalized so that the LV 
limit is at 1, it holds 



B. Some comments 

Another possible manifestation of entanglement is the 
negativity of the partial transposition |24[| . If a state 
Pn has a non-positive partial transposition (the state is 
NPT) with respect to some bipartite splitting of the par- 
ties, then it is not separable for this splitting. It is also 
known that if the state is distillable, then it is NPT ||. 
The relation between Bell violation and partial transpo- 
sition in A^-qubit systems was analyzed in [p8| for the 



tv(p N B) < (3{r) = 2^ \jr 2 + . (26) 

A necessary condition to detect A-qubit entanglement is 
therefore (3{r) > 2 {N - 2 ^ 2 . Let us see what this condition 
implies when the number of qubits is varied. 

For two qubits, the condition f3(r) > 1 is fulfilled for 
r > 1/2; but r is the weight of a Bell state in p, and it is 
known that r > 1/2 is a sufficient condition for the state 
to be entangled. Consequently, for two qubits this bound 



G 



simply says that if a state violates a Bell inequality, then 
it is entangled (and thence distillable). 

For three qubits, the condition (5{r) > \[2 is fulfilled for 
r > (1 + \/3)/4 ~ 0.683. In Appendix B, we show that 
this is sufficient but not necessary for full distillability, by 
giving an explicit protocol. As expected, the violation of 
a Bell inequality by a large amount is a sufficient, but 
not a necessary condition for full distillability. This is in 
perfect analogy with the two-qubit case, where there are 
distillable (that is, entangled) states that do not violate 
any Bell inequality. This is also in agreement with the 
facts that states of the form cosa|0...0) + sina|l...l), for 
an arbitrary number of qubits, never give a large viola- 
tion (if any) when a is small enough p9|; however, such 
states are distillable to |GHZtv) by filtering and classical 
communication. 

In the limit of a large number of qubits, we have 
P(r) ~ 2^ N ~ 1 ^/ 2 r. This means that for a violation 
(3 N > 2( Ar ~ p )/ 2 , p > 2, as in Theorem 1, the overlap 
r with the GHZ state must be larger than 2^ 1_p '/ 2 . In 
particular, for the violation implying A^-qubit entangle- 
ment (p = 2) one must have r > 1/V2 ~ 0.71. 



V. AT-PARTY ENTANGLEMENT AND Af-PARTY 
DISTILLABILITY 

In this Section we focus more specifically on full dis- 
tillability. We have proven in Corollary 1 that if an N- 
qubit state violates any of the WWZB inequalities (||) 
by an amount 0n > 2 tyN ^ 2 ^ 2 , then it is AT-partite distil- 
lable. This is a very general result, and because of this 
generality it cannot be improved: only (3n > 2 I - N ~ 2 ^ 2 
guarantees truly AT-qubit entanglement for the MBK in- 
equalities |Q , then a fortiori for the whole set of WWZB 
inequalities; and we have just proven that the A^-qubit 
entanglement detected by this criterion is fully distillable. 

Recently, other inequalities have been constructed 
whose violation guarantees A^-qubit entanglement 
|50|,[3l]]. However, the amount of violation is smaller. 
Specifically, for these inequalities fl^ = 2( N ~ 2 ^ 2 is the 
maximum amount of violation allowed by QM, and the 
criterion for AT-qubit entanglement reads (3n > 2' JV ~ 3 )/ 2 . 
Thus, the general criterion of Corollary 1 is not fulfilled. 
It seems, however, reasonable to conjecture that the N- 
qubit entanglement detected by these specific inequalities 
is also fully distillable. We are going to prove that this 
is indeed the case. But first, we must introduce the in- 
equalities under consideration. 



A. Uffink's inequality 

In Ref. pi]] , Uffink discussed a quadratic inequality 
that detects Af-qubit entanglement. The experimen- 
tal data for it are the same as for the WWZB family: 



each party can perform two von Neumann measurements, 
{nj,n^}. The settings are chosen in order to maximize 

Un(p) = ^Jtr(pM N ) 2 + tv(pM' N ) 2 , (27) 

where Mjv and M' N are the MBK operators defined 
above. The LV limit is Ulv = v2j since in LV, as well 
as for quantum product states, the average value of both 
M/v and M' N can reach 1. The QM bound is found to be 

N — 1 

Un(p) — , and if 

N-2 

U N (p) > 2— (28) 

then p exhibits A^-qubit entanglement. Of course, since 
the LV limit is set to \/2 instead of being set to 1, this 

N — 3 

corresponds to a violation /3n > 2~. At first sight, 
Uffink's inequality looks fundamentally different from the 
WWZB set of inequalities, since these are linear con- 
straints while Uffink's parameter Un(p) involve squaring 
correlation coefficients. However, using the basic opti- 
mization \/ x 2 + y 2 = max 7 ( cos 7 x + sin 7 y) , one can 
rewrite ( |27| ) as Un(p) = max 7 tr(p C//v j7 ) where we have 
defined the linear operator 

U Nn = cos 7 Mat -(- sin 7 M' N . (29) 

Thus, Uffink's quadratic inequality turns out to be a com- 
pact way of writing a set of linear inequalities, which are 
satisfied if the inequalities belonging to the WWZB fam- 
ily are satisfied. In particular, there exists 7 such that 
Un(p) = tr(p[/jv i7 ). In a geometrical picture, Uffink's 
parameter Un{p) defines a circle in the plane given by 
x = (M N ) = tr( P M N ) and y = (M' N ) = tv(pM' N ). 
The C/at, 7 define all the tangents to this circle: if a 
point lies outside the circle, it also lies beyond some tan- 
gent to the circle. In summary, Uffink's result reads: 
if there exist some settings and an angle 7 such that 
tr(pJ7jv )7 ) > 2 (N - 2 ^ 2 , then the state p has A^-qubit en- 
tanglement. 

Note that the "generalized Svethchny inequalities" dis- 
cussed in Ref. p(J, that also detect A^-partite entan- 
glement, are included in the discussion of the Uffink's 
inequality. In fact, the operators defining these last 
inequalities are Sn — Un.o — Afjv for A^ even and 
Sm = for A^ odd; and the condition for A^-partite 

entanglement is exactly trfp Sn) > 2^ N ~ 2 ^ 2 . 

Before showing that (|28| ) implies full distillability, we 
want to motivate our interest in Uffink's inequality by 
showing that this inequality is indeed stronger than the 
MBK inequality. On the one hand, it is evident from ( p7| ) 
that ix(pM N ) > 2( Ar ~ 2 '/2 implies U N (p) > 2^^^, 
even for the same settings. On the other hand, we 
can exhibit states for which f/jy(p) > 2^ N ^ 2 ^/ 2 but 
tr(p Mat) < 2( 7V ~ 2 )/ 2 . For instance, consider the three- 
qubit state cosa|000) + sina|IU), a € [0,7r/2], where 
\W) = (|110) + |101) + |011>) /V%. We found numeri- 
cally that the MBK inequality is violated for a > 7r/0.63, 
while the Uffink's inequality is violated for a > ir/8. It is 
not astonishing that Uffink's inequality is stronger than 
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those previously reported, because it allows optimization 
not only on the settings {fii, n^}, but also on a non-trivial 
parameter 7. 

In conclusion, we have an inequality whose absolute 
violation is weaker than the MBK, but which is a better 
detector of iV-partite entanglement. We turn now to the 
proof that the violation of this inequality also implies full 
distillability. 

B. Distillability from Uffink's inequality 

To show full distillability from the violation of Uffink's 
inequality, we begin by applying similar techniques as 
above. Indeed, the two MBK operators appearing in ( p9| ) 
can be written as 

M N = - {(<r(n N ) + a(n' N )) $ A/jy-i 

+ {a{h N ) - a{h' N )) <g> M' N _ X ) , (30) 

and similarly for M' N . Now, consider that we start with 
an iV-qubit state pn satisfying tr(pjv C^at, 7 ) > 2( N ~ 2 ^ 2 
for some 7. If qubit N applies the same measurement 
as in the previous section, the other N — 1 qubits can 
be projected with some probability into a state of N — 1 
qubits violating an inequality l//v-i,7'- Thus, the differ- 
ent parties apply this projection until the point where 
three of them end with a three-qubit state satisfying 

tr(p 3 C/37) > \/2- 

So we reduce the proof that the violation of the Uffink 
inequality implies full distillability to the simplest case, 
the one involving three qubits. Now, using the techniques 
introduced in p^ j, it can be shown (Appendix C) that a 
state satisfying tr(p3 C/3,^) > \f2 is necessarily such that 

(GHZI/93 |GHZ) > 0.628. (31) 

In this case, the distillation protocol of Appendix B can 
be applied: a three-qubit state violating the Uffink in- 
equality is three-party distillable. Going back, this means 
that if tr(pAr U Nn ) > 2( Ar ~ 2 )/ 2 , GHZ states of three 
qubits can be distilled between any group of three par- 
ties, which means that p^ is V-partite distillable. This 
concludes the proof. 

It is interesting to note that in some cases fully distill- 
ability can be associated to a small Bell violation. Indeed 
consider a systems of three qubits and the Svetlichny in- 
equality S3 = U% t s. The value attained by LV mod- 
els is exactly the bound above which we have 3-party 
entanglement, i.e. V2- Thus, in this case an infinitesi- 
mal Bell violation tr(p3 S3) = \/2 + e is sufficient for full 
distillability §|. 

VI. BELL INEQUALITIES AND THE SECURITY 
OF QKD PROTOCOLS 

The existence of a link between Bell inequality vio- 
lation and the security of QKD protocols was first no- 



ticed in |33j. There it was shown that the violation of 
the CHSH inequality is a necessary and sufficient con- 
dition for the security of the BB84 protocol fl34| , under 
the assumption of individual attacks and using privacy 
amplification |55|. 

This connection was later extended |36| to the follow- 
ing multi-partite QKD schemes: a sender encodes a key 
into N — 1 qubits shared between N — 1 observers in 
such a way that all of them must cooperate in order to 
retrieve the key. The quantum version of this protocol, 
also known as secret sharing, uses the correlations in a 
GHZ state of N qubits (see |37| for details). The main 
result of |j6| was to show that the mutual information 
between the sender and the authorized partners (all the 
receivers) is greater than the one between the sender and 
the unauthorized partners (the eavesdropper and the dis- 
honest receivers) if and only if the authorized partners 
can violate the MBK inequality by an amount greater 
than 2( JV_2 )/ 2 . It has to be emphasized that this secu- 
rity criterion is based on the very plausible fact that the 
difference between the mutual information for honest and 
dishonest parties should allow for some kind of classical 
privacy amplification protocol. However the existence of 
this protocol is at the present unknown. 

The region for security coincides with the Bell viola- 
tion sufficient for .ZV-party distillability. Thus, if the par- 
ties share a state with the sufficient amount of Bell vi- 
olation, they can use the quantum distillation protocol 
shown here for distilling a GHZ state and then run the 
quantum secret sharing protocol |38| . In this way Eve is 
disentangled from the honest parties, and the protocol is 
secure. Note that this is a quantum privacy amplification 
protocol, while, as we have just stressed, the existence 
of a classical protocol for these schemes in this security 
region remains an open question. 

Thus the results of the present paper prove that (i) 
the "plausible" security criterion put forward in |36| is 
definitely a security criterion, at least for quantum pri- 
vacy amplification; and (ii) the criterion is extended 
to the violation of any of the WWZB inequalities by 
(3n > 2( Ar ~ 2 '/ 2 , and to all the inequalities allowing for N- 
partite distillability like Uffink's. Further investigation in 
this direction is still required, but our results strengthen 
the interpretation of Bell inequalities as security indica- 
tors for quantum cryptography schemes. 



VII. DISCUSSION 



Bell inequalities are usually presented as a way for test- 
ing Quantum Mechanics vs LV theories. Then, its impor- 
tance is normally related to the insight they give in our 
interpretation of the quantum world. Recently, due to 
the new quantum information applications, the current 
understanding of quantum correlations has significantly 
changed. Nowadays it is important to detect when the 
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correlations in a quantum state are useful for quantum 
information tasks, i.e. they are distillable. In this work 
we have shown that Bell inequalities can also be useful 
for this role. Indeed, since present knowledge on multi- 
particle entanglement is far from being exhaustive, they 
provide a powerful tool for understanding distillability 
properties of A-qubit states. 

What does a multi-particle Bell violation exactly mean 
from the point of view of non-locality? It is clear that 
Bell violation implies some form of non-locality if want 
to describe the correlations within classical probability 
theory (i.e. within a hidden variable model). However it 
has been stressed recently that even larger violations of 
an A-party Bell inequality may be not sufficient for truly 
TV-party non-locality (30| . As an example, consider a 
three-qubit state saturating the maximal violation of the 
MBK inequality M3. An hybrid non-local model where 
two of the parties have non-local correlations and the 
third is separated can reach the same value. This leads 
to the search for inequalities that detect full TV-party non- 
locality. It turns out that these inequalities are equal to 
the usual MBK one for the case of an even number of 
particles, and to the so-called Svetlichny inequality (that 
is, with the notation of this article, U n,tt/a) f° r °dd A 
(see |3(| for details). From our results it follows that in 
both cases, full non-locality implies full distillability. 

Full distillability seems to be a quite strong entangle- 
ment criterion for multi-particle states. Indeed the set 
of local operations assisted with classical communication 
becomes less powerful when the number of parties in- 
creases. From the point of view of Bell inequalities, a 
quite large violation is needed for A-party distillability. 
Taking into account that the range of Bell violations is 
quite broad for large A, it is likely that to demand A- 
party distillability is much more stringent than to de- 
mand Bell violation. It is interesting to analyze the result 
given in |22| in view of the ideas presented in this article. 
In p2|] Dur constructs a multi-qubit state violating the 
MBK inequality that has all local partial transpositions 
positive, which means that the parties acting alone can- 
not distill entanglement at all. His result fits quite well 
into our picture: a strong violation is never reached by 
this state, since this would imply A-partite distillability. 

In conclusion, in this paper we have shown the exis- 
tence of a link between Bell violation and state distilla- 
bility in A-qubit systems: one can estimate the degree of 
distillability of an A-qubit state from the amount of its 
Bell violation (or non- locality). In this way Bell inequali- 
ties provide information about the usefulness of the state 
for quantum information applications. Indeed, a strong 
Bell violation is sufficient for the security of multi-particle 
QKD protocols. 
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APPENDIX A 

The spectral decomposition of any Bell operator in the 
WWZB family is of the form (§). The b k are non-negative 
and we suppose bo to be the largest eigenvalue, since we 
can always relabel the local bases in such a way that 
the largest eigenvalue corresponds to Qq . Moreover by 
a local unitary transformation we absorb the phase 9q, 
so Qq — Pq' is the projector onto |GHZat). If the Bell 
operator is normalized so that the LV is set to 1, then 
the eigenvalues satisfy the constraint given in Eq. (25) 
of 0: 



2 N-l_ 1 

E "'■ 

k=0 



b k z < 2 1 



(32) 



with equality for the MBK operators. For each A-qubit 
state pn, we have 



tr{p N B N )= ]T h(X+-X^) 



(33) 



fc=0 



with \ a k given in ([To|) . We suppose that Aq~ = r = 
(GHZat|/9jv|GHZjv). is the maximum of the A£ . By keep- 
ing only the positive terms, X k = AjJ", and normalizing the 
probabilities so that 

2 N - 1 -l 



E a* = i 



(34) 



fe=i 



we obtain the upper bound 



tr(p N B N ) < j3{r) = sup \b Q r + 



2 n-i_ 1 

E 

fe=i 



b k X k 



(35) 



where the supremum is taken over the b k compatible with 
( p2| ) and the X k satisfying (Q). Using Lagrange multipli- 
ers, it turns out that for fixed &o the extremum is reached 
when 



A, .' , b k = J 2 l\ hl , (36) 



2 N-1 _ 1 



2 N-1 _ ! 



for all k — 1, ...,2 N - 1 - 1. Writing b = 2 N ~ 1 cos??, we 
obtain for (3{r) the expression 



We thank Nicolas Gisin, Serge Massar and Wolfgang 
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from the Swiss NCCR "Quantum Photonics" and OFES, 



1 , > Sinn \ jv-i 

(3(r) =max^rcos77+(l-r)^==U=J 2~ . (37) 



Using max,, ( cos rjx + sin 77 y) = \J x 1 + y 2 we get ( 26 ) . 
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Just one comment to point out a common mistake 
when dealing with these Bell operators. We have said 
that the bound ti(pNB) < [3{r) is rough in general. One 
might expect however that the bound is exact for the 
MBK operator and the state 



p N (r)=rP+ + 



l-r 

2 N ^ - 1 



E 

fc=i 



p + 



(38) 



This guess would be correct if (p4|), with equality, were 
the unique constraint on the eigenvalues of the MBK op- 
erator; but this is not the case JL6J. Therefore it may 
happen that the set of bk that optimize f3(r) is not a set of 
possible eigenvalues. This remark already applies to the 
case of three qubits: as discussed in the text, f3(r) = \[2 
for r = r% ~ 0.683. However numerically one can ver- 
ify that p^r^) does not violate the Mermin inequality; 
the family of states p%{r) starts to violate the Mermin 
inequality only at r ~ 0.687. 



APPENDIX B 

Here we present a simple protocol for full distillability 
for three qubits. There is no claim of efficiency, even less 
of optimality, for such a protocol. Let us consider the 
basis of GHZ states (15) for three qubits. As usual, we 
shall write \iPq) = IGHZ3). One can locally depolarize 
any state p onto a state which is diagonal in the GHZ 
basis keeping the diagonal terms as in ([l6|). This is the 
first step of the distillation protocol: 



Pd= E E^ p * 



(39) 



fc=0 <T=± 



With further local operations, we can arrange (just for 
definiteness) that Pq is the maximum of the p a k . 

In the second step, one of the three parties, say Char- 
lie, measures his own qubit in the a x basis and com- 
municates the result s% = ±1 to the other two parties 
Alice and Bob. This way, Alice and Bob share several 
copies of each of the two two-qubit conditional states 
Pab(Sx = ±1)- The idea now is rather trivial: if at least 
one of these states is entangled, then Alice and Bob can 
distill a singlet out of many copies of it. Without loss of 
generality, we can concentrate on pab = Pab(Sx = +1). 
In the computational basis, this state reads 



PAB 



a c\ 
i — a d 
d h — a 
c a 



(40) 



with 



a = jE^o+Ma), 



(T 



(41) 



A necessary and sufficient condition for distillability is 
that {pab) Ta has at least a negative eigenvalue. In the 
present case, due the form of the matrix, this is a very 
simple condition to write. Without loss of generality, we 
can suppose that the negative eigenvalue is in the block 



M 



a c 
1 _ 
2 



(42) 



This block must have a positive eigenvalue since the trace 
is non-negative, so the necessary and sufficient condition 
for distillability is simply detM < 0. After some algebra, 
defining p^ = p^ + ^3 , this condition reads explicitly 



p — 2p + p > - 



(43) 



We don't need to study the domain of validity of this 
condition in very sharp detail. Actually, for our purpose 
we simply have to notice that if p q > 1/2 then ([13]) is 
satisfied. But p^ = (GHZ3I PIGHZ3), thus whenever 



(GHZ3MGHZ3 



> 



(44) 



Alice and Bob can distill a singlet if they collaborate with 
Charlie. But ( p4j ) is actually symmetric in the roles of 
the three parties; then if (44) holds, any pair of parties 
can distill a singlet. This is sufficient for full distillability. 



APPENDIX C 

We present here the detailed proof of the fact that the 
violation of the three-qubit Uffink inequality implies full 
distillability. This proof uses tools from the spectral de- 
composition of WWZB Bell operators. We begin by ap- 
plying the results of Ref. |l(| to the three-qubit operators 
M 3 and U 3n . 



A. Spectral decomposition of A/3 

The settings {fit, n^} that define the Bell operator are 
supposed to lie in the (x, y) plane for each qubit i = 1,2,3 
— this can always be achieved by local unitary operations 
on the state. Defining 



cos cti x + sin on y 



(45) 



and a similar definition for 
parametrized by the angles a — 
define 6j = cti — a' . 



n-, the settings are 
{cti, a-}. We shall also 
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For all three qubits, let |0) and |1) be the two eigen- 
vectors of <r z . To write the operators in a compact 
way, for all k e {0,1,2,3}, let a(k) be the operator 
acting as the Pauli matrices in the subspace spanned 
by |" +z") = \0k 2 k 3 ) and = \l_hh), where 

(/c2, ^3) is the binary expression of k and kj = 1 — kj for 
j = 2, 3. It follows from (@) that 



with 



M 3 = Q)b k n k - a(k) 

k 

M^ = ^b k n' k -a(k) 

k 

h k = cos 6 k x + sin 9 k y 



(46) 
(47) 

(48) 



and similarly for fi ' k . The expressions (|46|) and (|47j) im- 
ply in particular the fact, not stressed explicitly in p6[ , 
that M 3 and M 3 have the same eigenvalues. The way of 
obtaining the eigenvalues b k and the parameters 9 k from 
the settings a has been discussed in |16|: one has 



with /3j = fcj aj . The explicit form of &fe is not very 
elegant, but will be needed in what follows: 



( IT cos ( IT ^ s * n ^* E ^ s * n ^' 

2 i z 

where i = 1,2,3 and k\ = 1. 



B. The Uffink operator [/3, 7 

The Uffink operator U 3n reads 

f7 3 , 7 = cos 7M3 + sin 7M3 = u fe m fc • a(fc) (51) 

where is the unit vector along the direction cos 7^ + 
sin 7 h ' k and where the eigenvalues are given by 



u k = b k \Jl + sin 27 (n k ■ h' k ) . 



(52) 



Note that (n k ■ n' k ) ~ cos(6 k — 9' k ). Now, it follows from 
(||) that 



m k (a) = f k (a)f k (a')* = \b k \ 2 e^~ e ^ 



(53) 



where as usual a' means exchanging the settings a; <-*■ a[. 
By comparison with (E3) we find 



u k = \m k (a)\ + sin27Re(m fc (a)) 



sin 27 cos 5j 



(54) 



Here we can apply the same estimate as in Appendix 
B. Note that for the Uffink operator the bound (|3^) docs 
not hold in general, since the LV limit is not set to 1. 
But we have just to replace that constraint by 



E 



Uk 



4 (l + sin 27 cos 81 cos 82 cos S 3 ) 



(55) 



since for the MBK operators M 3 it holds J2 k bk 2 = 4. 
Apart from that, the calculation with the Lagrange mul- 
tipliers is the same. Without loss of generality, we 
can take uq to be the highest eigenvalue of C/ 3l7 , and 
with local unitary operations we can choose IGHZ3) = 
(|000) + 1 1 1 1} ) as the associated eigenvector. Writing 
5 = {S±, 82, S 3 }, we obtain 



(50) 



/3 7 (r) = sup [u (8)r- 

5 



•«(£)(! -r)] 



(56) 



with r = (GHZ 3 | p |GHZ 3 ) and 

U(8)-- 



3 



(57) 



The optimization over 8 can be done numerically. One 
finds there are some settings 8 and some values 7 for 
which one can get /3 7 (r) > y/2 only if r > rjj ~ 0.628. 
In conclusion: a necessary condition to violate the Uffink 
inequality for three qubits is that 



(GHZ 3 |p|GHZ 3 ) > 0.628. 



(58) 



Thus in particular (|44j) is fulfilled, and we can distill 
singlets between any two parties using the protocol de- 
scribed in Appendix C. 

Finally, we want to mention that in this case 



P3(r) = rP+ + i-^P+ 

6 k=£0 



(59) 



gives U 3 (p 3 (r)) > \/2 for r > 0.628. Comparing with the 
remark that concludes Appendix A, we see that the same 
state gives tr(p 3 (r)M 3 ) > %/2 only for r > 0.687. This 
is another manifestation of the strength of the Uffink in- 
equality. 
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